3W Solutions

1. Data Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:
3W Solutions GmbH
Heinrich-Lübke-Str. 38
51375 Leverkusen
Germany
Email: info@3wsolutions.de
Phone: +49 176 45947407

We have not appointed a data protection officer. Please direct any data protection enquiries to the email address above.

2. Legal Bases for Processing

We process personal data only where permitted by law. The applicable legal bases are, in particular, your consent (Art. 6(1)(a) GDPR), the performance of a contract or pre-contractual measures with you (Art. 6(1)(b) GDPR), compliance with a legal obligation (Art. 6(1)(c) GDPR), and our legitimate interests (Art. 6(1)(f) GDPR). Special categories of personal data (Art. 9 GDPR) are subject to stricter requirements — see section 13.

3. Visiting Our Website

When you visit our website for informational purposes only, your browser automatically sends data to our server: IP address, date and time of the request, name and URL of the file retrieved, the referring page, browser type and operating system, and the name of your internet access provider. This data is used to technically deliver the website, ensure system security and for statistical purposes, processed on the basis of Art. 6(1) (f) GDPR. It is deleted automatically once no longer required for these purposes.

4. Cookies and Your Consent

We use cookies, small text files stored on your device. Technically necessary cookies (such as sessionid for signing in, csrftoken to protect forms against misuse, and 3w-locale to remember your language preference) are set on the basis of Art. 6(1)(f) GDPR; they are required to operate the website.

Non-essential cookies, in particular for Google Analytics, are only set after your consent via the cookie notice (Art. 6(1)(a) GDPR). We store your choice in the 3w-consent cookie. You may withdraw your consent at any time via the cookie notice.

5. Hosting and Processors

This website and the platform are operated by Hostinger, Europe. Documents and media you upload are stored with Amazon Web Services (AWS), European Union region. We have data processing agreements in place with both providers pursuant to Art. 28 GDPR. Your data does not leave the European Union in connection with hosting.

6. Analytics and External Services

With your consent, we use Google Analytics, a web analytics service provided by Google Ireland Limited, to statistically evaluate the use of our website. We also embed reviews via the Google Places API and use Google Fonts for consistent typography. Google's respective privacy policies apply.

7. Contact Form

If you contact us via a contact form, we store the details you provide, including your contact information, in order to process your enquiry. The legal basis is your voluntarily given consent (Art. 6(1)(a) GDPR). We delete this data automatically once your enquiry has been resolved.

8. User Account and Onboarding

Using our platform requires registering a user account. We process your email address, your password in encrypted form, and the data you provide during onboarding. We send emails to confirm your email address, to reset your password, and to confirm changes you make. After signing in, we set a session cookie to keep you signed in during your visit. The legal basis is performance of the usage agreement with you (Art. 6(1)(b) GDPR).

9. Specialists' Data

To place, support and assist with the recognition of specialists relocating from abroad, we process the following categories of data:

  • Identity data: name, date and place of birth, gender, nationality, marital status
  • Contact data: address, phone number, country of residence
  • Professional data: target profession, current job title, professional experience, recognition status, competent recognition authority, recognition outcome, qualifications, employment references
  • Language data: language skills and levels, including our assessment of your German proficiency
  • Process data: visa appointments, visa validity, education planning, school enrolment for accompanying children, driving licence, hobbies, personal statement

The legal basis is performance of the placement and support agreement with you (Art. 6(1)(b) GDPR) and, where necessary, our legitimate interest in effective case management (Art. 6(1)(f) GDPR).

10. Uploaded Documents, Photos and Media

You may send us documents (such as certificates, diplomas and references), a profile photo, and images or video through the platform, including via WhatsApp. We distinguish between the following purposes:

  • Service delivery: documents such as certificates and diplomas are forwarded to prospective employers, recognition authorities and relevant public bodies to process your case, and are used to generate your CV on our platform. The legal basis is performance of the contract (Art. 6(1)(b) GDPR); no separate consent is required for this.
  • Marketing use: we use photos, portraits and image or audio recordings on our website, in presentations and on social media only where you have given separate consent (Art. 6(1)(a) GDPR). You give this consent voluntarily during onboarding or later in your account settings, and may withdraw it there at any time with effect for the future. After withdrawal, we may not be able to fully recall material already published.
  • Quality assurance: in anonymised, non-identifying form, we evaluate use of our platform to improve our services (Art. 6(1)(f) GDPR). We do not use your content to train AI models.

Uploaded files are stored with Amazon Web Services within the European Union; access is provided via time-limited, signed links.

11. Communication via WhatsApp

If you enable WhatsApp notifications, we process your phone number and the messages and attachments exchanged via WhatsApp for case communication. This feature is optional and is only used once you activate it and give the related consent (Art. 6(1)(a) GDPR); you may disable it at any time in your account settings. The service is provided by Meta Platforms Ireland Limited; its privacy policy applies.

12. Data of Family Members

Where you provide information about accompanying family members, or upload documents on their behalf (such as health insurance notices for a spouse or child), we also process their personal data to the extent required to process your shared case. Please inform the family members concerned about this processing.

13. Special Categories of Personal Data (Art. 9 GDPR)

We do not specifically request special categories of personal data (e.g. health data). Documents you voluntarily upload may nonetheless contain such information, for example in health insurance notices. We process such data only to the extent necessary to perform the placement and support agreement with you, and treat it with particular confidentiality.

14. Recipients and Categories of Recipients

Depending on the stage of your case, we share your data with the following recipients:

  • Prospective employers as part of the placement process
  • Competent recognition authorities and chambers
  • Immigration authorities, German diplomatic missions and visa offices
  • Language schools and training providers
  • Relocation partners assisting with housing and relocation
  • Technical service providers referred to in sections 5 and 6 (hosting, storage, email delivery, analytics), each acting as a processor

Data is shared only to the extent necessary for the respective purpose.

15. Transfers to Third Countries

Because we place specialists from countries outside the European Union and the European Economic Area, transferring your data to your country of origin or another third country may be necessary, for example to authorities or educational institutions there, or to prepare your departure. Where the European Commission has not issued an adequacy decision for the destination country, we base such transfers on appropriate safeguards, in particular the European Commission's standard contractual clauses (Art. 46 GDPR), or on the exception under Art. 49(1)(b) GDPR where the transfer is necessary to perform the contract with you.

16. Storage Period

We store personal data only for as long as necessary for the respective purpose or as required by statutory retention periods. We store account and case data for the duration of our business relationship and beyond, where commercial or tax retention periods (generally six to ten years) require it. Server log data is deleted automatically after a short period. We store cookie and marketing consents until withdrawn, and for evidentiary purposes for the duration of the applicable statutory limitation period.

17. Your Rights

Under the GDPR, you have the following rights:

  • To withdraw a consent you have given, with effect for the future (Art. 7(3) GDPR)
  • To obtain access to the personal data we hold about you (Art. 15 GDPR)
  • To rectify inaccurate data or complete incomplete data (Art. 16 GDPR)
  • To have your data erased, unless a statutory retention obligation applies (Art. 17 GDPR)
  • To restrict processing (Art. 18 GDPR)
  • To data portability (Art. 20 GDPR)
  • To object to processing based on legitimate interests (Art. 21 GDPR)

To exercise these rights, please contact info@3wsolutions.de. You also have the right to lodge a complaint with a data protection supervisory authority, in particular the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, which is competent for us.

18. Data Security

We protect the transmission of your data using TLS encryption. Session and CSRF cookies are set with the HttpOnly and SameSite attributes and, in production, only over a secure connection. Access to uploaded files is provided via time-limited, signed links. Access to your data within our team is restricted to the staff responsible for your case.

19. Changes to This Privacy Notice

We update this privacy notice whenever changes to our data processing or the applicable law require it.

Last updated: August 2026